Public Policy
Takeaways from the Dismissal of the Government’s Case Against the SolarWinds CISO
The government’s case against the SolarWinds CISO has been dismissed. What does this development mean?
Public Policy,
Security Compliance
Fortifying Assets for SEC Compliance with HackerOne
November 16th, 2023
After the SEC's recent charges against SolarWinds, publicly traded companies need robust cybersecurity risk management.
Security Compliance,
Public Policy
2024 Budget Planning: Preparing For U.S. Mandates to Implement Vulnerability Disclosure Policies (VDPs)
November 9th, 2023
U.S. policymakers are increasingly encouraging and mandating public and private sector organizations to enhance their cybersecurity programs by adopting VDPs. Have you planned for a VDP in next year’s budget?
Security Compliance,
Public Policy
VDPs Are Good For the Government — and Good For Business
August 28th, 2023
Congress recently introduced the Federal Cybersecurity Vulnerability Reduction Act.
Security Compliance,
Public Policy
New SEC Cyber Rules Incentivize Proactive Security Measures
August 9th, 2023
SEC’s Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure Rule The SEC’s final rule...
Public Policy,
Security Compliance
GUEST BLOG: Governments Across The World Are Mandating Vulnerability Disclosure So Why Are Companies Sitting On Their Hands?
May 24th, 2023
The IoT Security Foundation’s fifth annual report into the state of vulnerability disclosure consumer Internet...
Get the latest news and insights beamed directly to you
Public Policy,
Security Compliance
FDA's New Cybersecurity Requirements: Are You Prepared as a Medical Device Manufacturer?
May 12th, 2023
Where To Begin? Companies submitting products for FDA approval must do the following: Provide details of their...
Public Policy,
Security Compliance
HackerOne Responds To The Review of The UK’s Computer Misuse Act (CMA)
April 19th, 2023
By Ilona Cohen , Chief Policy Officer, and Michael Woolslayer , Policy Counsel The U.K. is in the midst of a...
Public Policy,
Security Compliance
Cyber Regulations Can Make Our Nation Safer
March 29th, 2023
While a largely voluntary approach to critical infrastructure cybersecurity has led to some improvements, a...
Policy Comments
When regulators have questions about policies and standards around the world, HackerOne has the answers.
- September 9, 2024: HackerOne Comments on NIST AI 800-1 Managing the Risk of Misuse
- August 9, 2024: UK Call for Views on the Cyber Security of AI Comments
- August 9, 2024: UK Code of Practice for Software Vendors Comments
- June 28, 2024: HackerOne Comments on Implementing the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)
- May 29, 2024: HackerOne Applauds Senator Warner’s Support for Legal Protection of AI Red Teaming
- April 29, 2024: HackerOne Response to OMB AI RFI
- April 16, 2024: Request for DOJ to Develop a Charging Policy under the CFAA to Protect Independent AI
Trustworthiness Research - March 18, 2024: Comment in Support of a DMCA Exemption for GenAI Research
- February 5, 2024: HackerOne NY Hospital Cybersecurity Requirements Comments
- February 2, 2024: Comments on NIST RFI on Artificial Intelligence Executive Order
- February 2, 2024: Comments on Cybersecurity for Unclassified Federal Information Systems (FAR Case 2021-019)
- February 2, 2024: Comments on Federal Contractor Cybersecurity (FAR Case 2021-017)
- April 6, 2023: Response to UK Computer Misuse Act Consultation
- June 23, 2023: Response to CISA Secure Software Attestation Form
- July 12, 2023: Response to NIST 800-171r3 Draft
- November 6, 2023: Comments to NIST CSF 2.0 Public Draft
- December 21, 2023: Comments on DMCA Section 1201 Generative AI Research
- March 19, 2022: Comments on UK DCMS Cyber Profession Pathway
- July 7, 2022: Comments on FDA Cybersecurity in Medical Devices
- December 14, 2022: Comments on Cyber Requirements for Federal Insurance
- June 08, 2021: Response to UK Computer Misuse Act Call for Information
- September 3, 2020: Proposals for Regulating Consumer Smart Product Cyber Security
- September 10, 2020: Comments on NIST SP 800-53B
External Press
New hacker advocacy group seeks to protect work of security researchers
Cyber regulations can make our nation safer
The Role of Regulation in Comprehensive Cybersecurity
A new hackathon is helping to make elections more secure
Cybersecurity firms to launch legal support fund, advocacy group for ethical hackers
CISA releases HBOM framework for supply chain risk management